Spam Filter ISP Support - Whitelisted domains still get tagged

Whitelisted domains still get tagged

Printed From: LogSat Software
Category: Spam Filter ISP
Forum Name: Spam Filter ISP Support
Forum Description: General support for Spam Filter ISP
URL: https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=6349
Printed Date: 14 July 2025 at 6:50am

Topic: Whitelisted domains still get tagged

Posted By: Guests
Subject: Whitelisted domains still get tagged
Date Posted: 14 January 2008 at 5:44am

I'm using the latest beta version and when I have SPAM tagging en forwarding enabled there are mails from whitelisted domains that still get SPAM-tagged.

01-11-08 14:54:17:526 -- (2596) Connection from: 217.77.137.86 - Originating country : Netherlands
01-11-08 14:54:17:651 -- (2596) Received MAIL FROM: < mailto:bart@djfklasdk.com - bart@djfklasdk.com >
01-11-08 14:54:17:666 -- (2596) Received RCPT TO: mailto:robbert@adfjlasdlfjk.nl - robbert@adfjlasdlfjk.nl
01-11-08 14:54:17:682 -- (2596) Resolving 217.77.137.86 - smtp1.email.luna.net
01-11-08 14:54:17:947 -- (2596) - Invalid MX record -
01-11-08 14:54:17:947 -- (2596) 217.77.137.86 - Mail from: mailto:bart@djfklasdk.com - bart@djfklasdk.com To: mailto:robbert@adfjlasdlfjk.nl - robbert@adfjlasdlfjk.nl will be rejected
01-11-08 14:54:17:947 -- (2596) Bypassed all rules for: mailto:robbert@adfjlasdlfjk.nl - robbert@adfjlasdlfjk.nl from mailto:bart@djfklasdk.com - bart@djfklasdk.com ( AutoWhiteList Force Delivery)
01-11-08 14:54:18:354 -- (2596) Bypassed all rules for: mailto:robbert@adfjlasdlfjk.nl - robbert@adfjlasdlfjk.nl -- from mailto:bart@djfklasdk.com - bart@djfklasdk.com (Whitelisted EMail Address To)
01-11-08 14:54:18:401 -- (2596) Starting queueing procedures
01-11-08 14:54:18:401 -- (2596) EMail from mailto:bart@djfklasdk.com - bart@djfklasdk.com to mailto:robbert@adfjlasdlfjk.nl - robbert@adfjlasdlfjk.nl was queued. Size: 71 KB, 72704 bytes
01-11-08 14:54:18:401 -- (3832) Sending email from mailto:bart@djfklasdk.com - bart@djfklasdk.com to mailto:robbert@adfjlasdlfjk.nl - robbert@adfjlasdlfjk.nl --
01-11-08 14:54:18:416 -- (2596) Disconnect
01-11-08 14:54:18:916 -- (3832) EMail from mailto:bart@djfklasdk.com - bart@djfklasdk.com to mailto:robbert@adfjlasdlfjk.nl - robbert@adfjlasdlfjk.nl -- was forwarded to iqmail.iqdomain2.nl:25

This mail got tagged.

Another example:

01-14-08 08:52:11:350 -- (1728) Connection from: 85.119.243.15 - Originating country : Netherlands
01-14-08 08:52:11:538 -- (1728) Received MAIL FROM: < mailto:bart@djfklasdk.com - bart@djfklasdk.com >
01-14-08 08:52:11:538 -- (1728) Received RCPT TO: mailto:robbert@qqqdjfklasdk.nl - robbert@qqqdjfklasdk.nl
01-14-08 08:52:11:569 -- (1728) Resolving 85.119.243.15 - mail.dutch.nl
01-14-08 08:52:11:960 -- (1728) - Invalid MX record -
01-14-08 08:52:11:960 -- (1728) 85.119.243.15 - Mail from: mailto:bart@djfklasdk.com - bart@djfklasdk.com To: mailto:robbert@qqqdjfklasdk.nl - robbert@qqqdjfklasdk.nl will be spam-tagged
01-14-08 08:52:11:960 -- (1728) Bypassed all rules for: mailto:robbert@qqqdjfklasdk.nl - robbert@qqqdjfklasdk.nl from mailto:bart@djfklasdk.com - bart@djfklasdk.com ( AutoWhiteList Force Delivery)
01-14-08 08:52:12:053 -- (1728) Bypassed all rules for: mailto:robbert@qqqdjfklasdk.nl - robbert@qqqdjfklasdk.nl -- from mailto:bart@djfklasdk.com - bart@djfklasdk.com (Whitelisted EMail Address To)
01-14-08 08:52:12:116 -- (1728) Starting queueing procedures
01-14-08 08:52:12:116 -- (1728) EMail from mailto:bart@djfklasdk.com - bart@djfklasdk.com to mailto:robbert@qqqdjfklasdk.nl - robbert@qqqdjfklasdk.nl was queued. Size: 36 KB, 36864 bytes
01-14-08 08:52:12:116 -- (1728) Starting bayesian procedures
01-14-08 08:52:12:132 -- (3988) Sending email from mailto:bart@djfklasdk.com - bart@djfklasdk.com to mailto:robbert@qqqdjfklasdk.nl - robbert@qqqdjfklasdk.nl --

Replies:

Posted By: Guests
Date Posted: 15 January 2008 at 6:49am

And "Authorized To Emails" filter stops rejecting if you enable tagging:

01-15-08 12:45:54:195 -- (1240) - EmailTO is not in AuthorizedTOEmail list...
01-15-08 12:45:54:195 -- (1240) 217.77.137.85 - Mail from: mailto:fritzlv@taowoh.com - fritzlv@taowoh.com To: mailto:fritzlybar@informatique.nl - fritzlybar@infe.nl will be spam-tagged
01-15-08 12:45:54:257 -- (1240) EMail from mailto:fritzlv@taowoh.com - fritzlv@taowoh.com to mailto:fritzlybar@infe.nl - fritzlybar@infe.nl was queued. Size: 1 KB, 1024 bytes
01-15-08 12:45:54:257 -- (1240) Starting bayesian procedures
01-15-08 12:45:54:257 -- (1240) Starting queueing procedures
01-15-08 12:45:54:273 -- (9144) Sending email from mailto:fritzlv@taowoh.com - fritzlv@taowoh.com to mailto:fritzlybar@informatique.nl - fritzlybar@infe.nl --
01-15-08 12:45:54:288 -- (6524) Time to add Msg to Bayes corpus:0
01-15-08 12:45:54:320 -- (1240) Disconnect
01-15-08 12:45:54:679 -- (9144) EMail from mailto:fritzlv@taowoh.com - fritzlv@taowoh.com to mailto:fritzlybar@informatique.nl - fritzlybar@infe.nl -- was forwarded to iqmail.iqdomain2.nl:25

Posted By: LogSat
Date Posted: 15 January 2008 at 11:02pm

For the first post, we replicated the problem, it does look like a bug for now. We'll have that fixed shortly if so. Thanks for the report!

For he 2nd posting, if a "spam-tag" option is enabled, then spam emails will be delivered. So in that case, even if the recipient is not in the AuthorizedTO list, the email will be delivered (but marked as spam).

-------------
Roberto Franceschetti

http://www.logsat.com" rel="nofollow - LogSat Software

http://www.logsat.com/sfi-spam-filter.asp" rel="nofollow - Spam Filter ISP

Posted By: Guests
Date Posted: 16 January 2008 at 2:33am

Thnx for the response. I would really like this mail not to be delivered. Because it generates an enormous amount of bounces to and from my actual mailserver. Maybe there's a reason why you are forwarding this?